readf
Static task
static1
Behavioral task
behavioral1
Sample
391af1434e1cf93d009b19f552779633_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
391af1434e1cf93d009b19f552779633_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
391af1434e1cf93d009b19f552779633_JaffaCakes118
-
Size
2.1MB
-
MD5
391af1434e1cf93d009b19f552779633
-
SHA1
ce157dc0bec120f7583a687d45e4c69a115605ed
-
SHA256
733124c5a621d00df0a53c3cb44ec57dbc2873b7f32feb16d4638682a45ef9c1
-
SHA512
17d538b2c9217afbe24734f7e9e713ebe3de02a0dc082c205dfff587c8a8604254896e43ce331e1ef75dd982af14a938f9ef6a8f456d854101a3fef1a501f8cb
-
SSDEEP
49152:FlFcDfJwEXkx3qEh4ngIIAigImRL8y2gJRU5Y:FTcTTXD26RAPZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 391af1434e1cf93d009b19f552779633_JaffaCakes118
Files
-
391af1434e1cf93d009b19f552779633_JaffaCakes118.dll windows:5 windows x86 arch:x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteFileA
Exports
Exports
Sections
Size: 304KB - Virtual size: 50.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 286KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qkkcmsad Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
utazvxyj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE